added instructions for signing puppet certs